Runtime release ledger

Changelog

A running record of what we have shipped, hardened, and filed.

August 2026

COMPLIANCE

GCC/MENA Region and Compliance Page

GCC and MENA are now supported deployment regions alongside EU, US, and customer-chosen locations. A new Compliance page at /compliance-frameworks maps Gateplex controls to EU AI Act Article 12 and Article 50, financial services controls, and HIPAA data handling. Financial services guidance now references Qatar Central Bank's AI Guideline and SAMA Counter-Fraud Framework §3.8(d)(8). Shadow Compliance Audit engagement details are clarified: the customer provides one integration point, a named contact, and roughly one hour for scope confirmation; the 30-day observation period produces a report after it concludes.

COMPLIANCE

Saudi Arabia Regulatory Mapping

Saudi Arabia regulatory mapping added to /compliance-frameworks: the National Cybersecurity Authority's AI Cybersecurity Guidelines (consultation draft, closed August 5, 2026), the Essential Cybersecurity Controls (ECC-2:2024, in force), and SAMA's Counter-Fraud Framework (in force, Section 3.8(d)(8) AI auditability requirement).

NEW FEATURE

PENDING_APPROVAL Live Feed Filter

PENDING_APPROVAL added as a filter option in the Live Feed, with its own distinct color in the verdict pill display, alongside the existing ALLOW, FLAG, and BLOCK options.

PERFORMANCE

Hash Chaining Verified Against Production Data

Per-record hash chaining hardened and independently verified against live production data, confirming record_hash and prev_hash are computed and linked correctly at insert time for every new record.

July 2026

PERFORMANCE

Dashboard Intercepts Counter Fix

Fixed the dashboard intercepts counter to reflect exact server-side totals. The previous implementation silently capped row fetches, causing the displayed count to understate actual totals for high-volume organizations. Counts are now computed server-side without a row cap. Committed July 13, 2026.

June 2026

NEW FEATURE

Human-in-the-Loop Approval Queue

FLAG rules can now require human approval before an agent action executes. Actions are held in a pending queue. Named reviewers approve or reject with their email recorded against each decision. Python SDK v0.2.3 supports automatic polling via wait_for_approval().

COMPLIANCE

Rule Change Audit Log

Every guardrail rule change is now logged with the admin email, timestamp, and full before and after state. SHA-256 hash chaining ensures the log is tamper-evident. Exportable as CSV.

NEW FEATURE

Ten Rule Types

Eight new rule types added alongside PII Shield and Spend Limit: Keyword Block, Keyword Flag, Rate Limiter, API Scope Control, Regex Pattern Match, Output Length Limit, Prompt Injection Detector, and Repetition Detector. Spend Limit blocks tool calls whose detected transaction amount, matched via configurable regex patterns, exceeds a set threshold. Currently supports single-currency amount detection without conversion.

COMPLIANCE

Compliance Packs

Three pre-configured compliance packs added: EU AI Act Article 12 Pack, HIPAA Safety Pack, and Financial Services Pack. Each pack adds multiple pre-configured rules with one click.

COMPLIANCE

Shadow Compliance Audit

Fixed-fee, 30-day diagnostic engagement that silently observes your AI agent activity. No code changes. Runs inside your own environment. Request at gateplex.ai/shadow-audit.

NEW FEATURE

VPC Edition Live

Gateplex VPC Edition is now available. The governance engine runs entirely inside your AWS or Azure environment via a four-container Docker stack. Zero data egress. Air-gapped deployment available on request.

COMPLIANCE

Second USPTO Provisional Patent Filed

Second provisional patent application filed covering the VPC split-plane deployment architecture and per-record SHA-256 hash-chained compliance evidence.

May 2026

NEW FEATURE

Python SDK v0.2.2 on PyPI

Official Python SDK published with OpenAI and Anthropic one-line patchers, batch intercept, context manager, and PENDING_APPROVAL verdict support.

NEW FEATURE

MCP Server Listed

Gateplex MCP server listed on Smithery, Glama, and MCP.so. Discoverable by any MCP-compatible AI agent framework.

COMPLIANCE

First USPTO Provisional Patent Filed

First provisional patent application filed covering the core interception architecture and tamper-evident audit trail mechanism.

NEW FEATURE

Hosted Product Launched

Gateplex governance engine live at gateplex.ai. Server-side enforcement, per-record SHA-256 hash chaining, live intercept feed, compliance PDF export.